The regulation revolves around a small set of statutory concepts and mechanical definitions. The principal concepts in the text are "visitable site", "required information", "quarter", "registered NDIS provider" and "NDIS provider", and the operation of the community visitor program functions under specified sections of the Act.

• Visitable site: The regulation prescribes the places that count as visitable sites for the Act’s community visitor program by expressly stating that the places in schedule 1 are prescribed for the Act’s s 39 definition of "visitable site" (s 3(1)). The text further clarifies, for the purposes of schedule 1, that a reference to "the department that is mainly responsible for public health" includes Hospital and Health Services under the Hospital and Health Boards Act 2011 (s 3(2)). The regulation therefore ties the Act’s powers to a prescribed list in schedule 1 rather than leaving the concept entirely to statutory definition or administrative determination.

• Required information: Both s 4 and s 5 set out what the regulation treats as the Act’s "required information" where s 49A (adult program) or s 72A (child program) of the Act applies. The same data elements recur: provider name, contact telephone number, email address, and the physical addresses of sites or places where the prescribed services are provided. The texts for adult and child programs are parallel (s 4(2); s 5(2)).

• Quarter: The regulation defines the reporting periods by inserting s 2A, which specifies the four calendar quarters (1 January to 31 March; 1 April to 30 June; 1 July to 30 September; 1 October to 31 December). The provision is expressly noted as inserted by a 2019 subordinate legislation instrument (s 2A ins 2019 SL No. 114 s 4).

• Timing: The reporting timetable is exact. For both adult and child programs, the first supply of the prescribed information was required "on or before 14 October 2019" and then "within 14 days after the end of each quarter after 14 October 2019" (s 4(1); s 5(1)). The effect is to create a regular, quarterly reporting rhythm with a 14‑day window to report after each quarter ends.

• Provider categories: The regulation distinguishes between "registered NDIS providers" (s 4 applies to those) and "NDIS providers or registered NDIS providers" (s 5). The text does not define those terms; it relies on the Act and the statutory context for their meaning. The regulation therefore operates against pre-existing legal categories of provider without recapitulating their formal definitions.

• Relation to the Act and schedule: The regulation repeatedly links its requirements back to particular sections of the Act , s 39 for visitable sites, s 49A for adult provider reporting, and s 72A for child accommodation service provider reporting. The regulation supplies the specific data and timing that those Act provisions require but leaves substantive powers, and any penalties or enforcement, to the Act.

Taken together, these concepts make the regulation primarily a data‑specification and reporting timetable instrument. It prescribes which places are subject to visits, which providers must disclose contact and site information, exactly what those disclosures must contain, and the reporting cadence, defined against the calendar quarters set out in s 2A.

The regulation imposes obligations and interacts with actors in a narrow but identifiable set.

• Registered NDIS providers: Section 4 prescribes reporting obligations specifically for "registered NDIS providers" where the Act’s s 49A applies. Those providers must give the public guardian specified contact information and the addresses of each visitable site at which they provide services or supports to which s 49A applies. The reporting timetable is on or before 14 October 2019 and then within 14 days after the end of each quarter after that date (s 4(1)-(2)). Any registered provider who delivers services at places captured by schedule 1 or by the Act’s s 49A will be directly affected.

• NDIS providers and registered NDIS providers providing child accommodation services: Section 5 applies to "NDIS provider or registered NDIS provider" for the child community visitor program under Act s 72A. Those providers must give the public guardian the specified contact fields and the addresses of each place at which they provide the child accommodation service to which s 72A applies. The same initial and quarterly reporting timetable applies (s 5(1)-(2)). This means the obligation for child accommodation services is broader in provider coverage than the adult provision, capturing both unregistered and registered providers where the Act’s s 72A is triggered.

• The public guardian: The regulatory obligations require that the specified providers "give the public guardian the required information" (s 4(1); s 5(1)). The public guardian is the recipient and therefore the statutory actor that will use the data to implement the community visitor program, maintain visitable-site lists, and, presumably, coordinate visits. The regulation does not spell out how the public guardian must use or publish the information, it only specifies the information flow into the public guardian’s office.

• Facilities and places listed in schedule 1: Although schedule 1 is not supplied in the text presented, s 3 prescribes its places as visitable sites for the Act’s community visitor program. Entities operating at those places will be affected to the extent the public guardian exercises visiting powers under the Act. The regulation also ties those places to a Hospital and Health Service where schedule 1 references the department mainly responsible for public health (s 3(2)).

• Entities preparing compliance systems: Administrators inside provider organisations, compliance officers, and those responsible for reporting will be affected because they must assemble, verify and deliver the four data fields each quarter and on the initial deadline. The regulation’s timing (14 days after quarter end) imposes a short reporting window that requires internal processes to capture any new sites or contact changes promptly.

• Other public bodies: The regulation refers to the Hospital and Health Boards Act 2011 for the meaning of "Hospital and Health Service" in schedule 1 (s 3(2)). Any hospital/health service named in schedule 1 or operating as the entity referred to by schedule 1 will be within the statutory ambit created by that cross-reference.

Who is not explicitly affected: The regulation does not itself impose duties on community visitors, visitors’ employers, or private persons other than the specified categories of providers. It also does not in itself create licensing, funding or operational obligations beyond the reporting requirement. Any operational constraints or sanctions would need to be located in the parent Act or elsewhere; the regulation does not set those out.

The regulation establishes a set of duties, principally reporting duties, and leaves substantive rights to the Act. The duties are precise and can be catalogued as obligations to supply specified data items within set timeframes; there are no express rights or enforcement rights set out in this regulation alone.

Principal duties

• Duty to provide prescribed information to the public guardian (adult program): Registered NDIS providers who fall within the Act’s s 49A are required to "give the public guardian the required information" on a specified initial date and quarterly thereafter. The prescribed data elements are the provider’s name, contact telephone number and email address, and the address of each visitable site at which the registered NDIS provider provides services or supports in relation to which s 49A applies (s 4(1)-(2)). The duty is categorical in the text: providers "must give" the public guardian the information.

• Duty to provide prescribed information to the public guardian (child program): NDIS providers and registered NDIS providers who fall within the Act’s s 72A are required to "give the public guardian the required information" on or before 14 October 2019 and then within 14 days after the end of each subsequent quarter. The required information is the provider’s or registered provider’s name, contact telephone number and email address, and the address of each place at which the provider provides the child accommodation service to which s 72A applies (s 5(1)-(2)).

• Duty to observe the quarterly schedule: The regulation defines "quarter" (s 2A) and imposes a 14‑day post‑quarter reporting window. The duty is thus not merely to provide a snapshot; it is to maintain a rolling, quarterly reporting regimen, with a specific calendar definition of the reporting periods that the duty tracks.

Scope limitations and conditionality

• Coverage linked to Act provisions: Both reporting duties are expressly framed "for section 49A (2) of the Act" or "for section 72A (2) of the Act" (s 4(1); s 5(1)). That means these duties are not free‑standing statutory obligations; they operate as the regulatory prescription of what is "required information" under those provisions of the Act. The obligation therefore depends on the conditions under the Act for when s 49A or s 72A applies. The regulation does not itself define those triggering conditions.

• Content boundaries: The regulation specifies particular fields only: name, telephone, email, and addresses of sites or places. It does not require any other particulars such as license numbers, service capacity, staff composition or program details. The duty is therefore bounded to those discrete data elements (s 4(2); s 5(2)).

Express rights and omissions

• No expressed rights to information access or release: The regulation does not itself create any rights for third parties to access the information that providers give the public guardian. It only prescribes the supply to the public guardian. Any rights of access, publication or use by third parties must therefore be located in the Act or in the public guardian’s practice; they are not created or limited by this regulation text.

• No enforcement or sanction clauses: The regulation does not include express enforcement mechanisms, penalties, or specific notices for breach. Therefore, the practical right of the public guardian or any other entity to compel compliance or the consequences of non‑compliance are not articulated in the regulation itself. Enforcement authority, if any, should be sought in the Act or other instruments, because the regulation does not specify those mechanisms.

Practical duties for providers to implement

• Maintain up‑to‑date contact details and site address lists, since each quarter must be reported within 14 days of its end (s 4(1); s 5(1)).

• Ensure the initial reporting deadline of on or before 14 October 2019 is met for providers to which the provisions apply (s 4(1); s 5(1)).

• Identify whether their services or sites fall within the visitable sites listed in schedule 1 for the purposes of s 49A and whether their child accommodation services engage s 72A, because the reporting duties are confined to services "in relation to which" those Act sections apply (s 4(2); s 5(2)).

In short, the regulation’s key duties are narrow, data‑focused reporting obligations with defined timing and content. Rights and enforcement mechanisms are not set out in the regulation text itself.

The regulation text supplied does not itself create penalties, specify enforcement mechanisms, or set out compliance notices. There are no clauses in the provided regulation that establish fines, criminal offences, administrative penalties, or formal compliance orders for failure to supply the prescribed information. The lack of such clauses in this regulation means the following points are factually supportable from the provided text.

• No express sanctions in the regulation: Neither s 4 nor s 5, nor any other provision in the text supplied, includes an express penalty provision, infringement notice power, or enforcement procedure tied to the reporting duties. The regulation therefore functions as a prescriptive specification of information and timing, without accompanying regulatory sanctions in its own text.

• Enforcement must be located in the Act or elsewhere: Because the reporting duties are framed as prescriptions for what amounts to "required information" under identified sections of the Act (s 49A and s 72A), the actual enforcement mechanisms, if any, are logically to be found in the Act itself or in other instruments referred to by the Act. The regulation does not state those mechanisms. Practitioners should therefore consult the parent Act provisions s 49A and s 72A, and relevant enforcement parts of the Act, to determine legal consequences for non‑compliance.

• Recipient duties and discretion: The regulation requires providers to "give the public guardian the required information" (s 4(1); s 5(1)). The regulation does not set out how the public guardian must process, verify, publish or make available that information, nor does it state whether the public guardian has discretion to accept late reports, to request corrections, or to take administrative action. Any such powers would have to be found in the Act or in the public guardian’s internal policies; they are not set out here.

• Practical enforcement avenues remain administrative: Because the regulation is primarily informational, administrative follow‑up by the public guardian (for example, seeking missing reports, following up non‑reporting providers, or using other legislative powers) appears the likely enforcement mechanism, but this is not specified. The absence of penalties in the regulation creates an implementation risk where the public guardian’s ability to secure provider cooperation depends on non‑regulatory tools or separate legal powers.

• No statutory timeframe for corrective action set by this regulation: The regulation sets a reporting deadline but does not set timelines for notices to comply or for remediation following non‑receipt. Again, that framework is absent from this instrument.

In summary, the regulation prescribes duties but contains no explicit penalties or enforcement procedures within its own text. Determination of legal consequences for non‑compliance requires reference back to the Act or to other instruments that may empower the public guardian or other agencies to enforce reporting requirements.

The regulation is explicitly framed as operating alongside particular sections of the Public Guardian Act and references one external statute. The interactions stated in the text are narrow and specific.

• Interaction with the Public Guardian Act (Act references): The regulation repeatedly ties its prescriptions to particular sections of the Act. Section 3 prescribes visitable sites "for section 39 of the Act, definition visitable site" (s 3(1)). Section 4 operates "for section 49A (2) of the Act" and supplies the prescribed "required information" for that provision (s 4(1)-(2)). Section 5 operates "for section 72A (2) of the Act" and supplies the prescribed "required information" for that provision (s 5(1)-(2)). These linkages show the regulation functions as a subordinate instrument that supplies detail required by the parent statute: it defines particular data elements, timing and the list of visitable sites which the Act uses for its community visitor program.

• Cross‑reference to the Hospital and Health Boards Act 2011: The regulation clarifies that "a reference in schedule 1 to the department that is mainly responsible for public health includes a reference to a Hospital and Health Service under the Hospital and Health Boards Act 2011" (s 3(2)). That cross‑reference means that where schedule 1 refers to the government department with responsibility for public health, the term is to be interpreted to include Hospital and Health Services as defined by the separate Hospital and Health Boards Act 2011. The practical effect ties entities created or governed by that Act into the list of visitable sites when schedule 1 uses that departmental reference.

• Reliance on external definitions and thresholds: The regulation uses the terms "NDIS provider" and "registered NDIS provider" without defining them. Those terms are industry‑specific and are likely defined in other legislation or regulatory instruments governing the National Disability Insurance Scheme. The regulation therefore assumes the existence of external legal definitions and piggybacks on them; its obligations apply only to actors who fall within those external categories.

• No standalone enforcement: As noted, the regulation does not contain enforcement or penalty clauses. Any punitive, coercive, or compliance enforcement mechanisms would need to be located in the parent Act or elsewhere. The regulation’s interaction with enforcement laws therefore is indirect: it supplies data that the public guardian will use under the Act, but does not itself invoke enforcement statutes.

• Schedule 1 as locus of site‑level interaction: The regulation prescribes that "the places stated in schedule 1 are prescribed" for the Act’s definition of visitable site (s 3(1)). Where schedule 1 names entities or categories that are regulated by other Acts, the visitable‑site status can create cross‑domain interaction between the public guardian’s visiting powers and the regulatory regimes that govern those facilities. The regulation’s cross‑reference to Hospital and Health Services under the separate Act is an explicit example. The exact interaction depends on schedule 1’s content, which is not included in the provided text.

• Temporal interaction via commencement and insertion notes: The regulation contains commencement language and insertion notes. It commenced on 1 July 2014 except for specified sections which commence on the commencement of another Act (s 2). Additionally, several provisions are marked as inserted in 2019 by a subordinate legislation instrument (s 2A ins 2019 SL No. 114 s 4; s 4 ins 2019 SL No. 114 s 6; s 5 ins 2019 SL No. 114 s 7). Those notes indicate that the regulation has been updated to interact with new policy or statutory requirements at different times; the effective operation of the reporting duties therefore depends on those temporal links.

In sum, the regulation operates as a subordinate, technical instrument that supplies required data, timing and site prescriptions the Public Guardian Act refers to. It cross‑references at least one other statute for definitional purposes and relies on external definitions for provider categories. The regulation itself does not create cross‑cutting enforcement links; those must be sought in the Act or in other applicable statutes.

The regulation text includes explicit insertion and commencement notes that record its amendment history as reflected in the text provided. The amendment entries in the regulation are narrow and factual.

• Original commencement: The regulation text states that it, other than provisions mentioned in subsection (2), commenced on 1 July 2014 (s 2). It also records that sections 7 and 8 commence on the commencement of the Child Protection Reform Amendment Act 2014, s 6 (s 2(2)). The text supplied does not include sections 7 or 8 themselves. The commencement clause therefore places the regulation’s origin in mid‑2014 while noting that particular provisions were tied to the operation of another amending Act.

• 2019 insertions: Several substantive items in the regulation are marked as inserted by subordinate legislation in 2019. These insertions are the source of the current reporting requirements and the quarter definition. Specifically:

  • s 2A "Definition" (defining quarter as the four calendar quarters) is annotated "s 2A ins 2019 SL No. 114 s 4". That shows the quarter definition was added by SL No. 114 in 2019 (s 2A).

  • s 4 "Requirement for particular registered NDIS providers to give information to public guardian,Act, s 49A" is annotated "s 4 ins 2019 SL No. 114 s 6". That indicates s 4 was inserted in 2019 by that subordinate legislation instrument.

  • s 5 "Requirement for particular NDIS providers and registered NDIS providers to give information to public guardian,Act, s 72A" is annotated "s 5 ins 2019 SL No. 114 s 7". That indicates s 5 was likewise inserted in 2019.

These insertion notes are the only amendment markers in the text provided. They show the regulation was updated in 2019 to add explicit reporting duties and to define the quarterly reporting periods. The presence of insertion annotations but the absence of other amending entries in the supplied extract indicates the 2019 amendments are the most recent changes recorded in this text.

• Repetition and formatting: The supplied text repeats some subsections and contains formatting duplications (for example, repeated clause text under s 3 and repeating sub‑bullets under s 4 and s 5). Those duplications appear to be repetition rather than substantive amendments. They do not indicate additional legal changes beyond the insertion annotations.

• Omitted schedule content: The regulation prescribes schedule 1 as the list of visitable sites (s 3), but schedule 1 is not included in the supplied extract. Consequently, any historic amendments to schedule 1 are not visible in the text provided. The regulation’s effective content with respect to visitable sites therefore depends on schedule 1’s content and any amendments to it, none of which are in the provided material.

• Cross‑Act commencement link: The regulation links the commencement of particular provisions (sections 7 and 8) to the commencement of the Child Protection Reform Amendment Act 2014 by reference (s 2(2)). This indicates at least one prior or contemporaneous legislative reform context around 2014 that affected the regulation’s timing.

In summary, the text supplied shows an original instrument effective 1 July 2014, with substantive insertions in 2019 that added the quarterly reporting duties and the quarter definition. The supplied extract does not show further amendment activity nor the content of schedule 1.

The regulation text supplied contains no litigation history, case citations, or references to judicial interpretation. It does not mention any legal proceedings, statutory challenges, or court decisions that interpret its provisions. Therefore the following factual assertions are supported by the text.

• No cases named or cited: The regulation itself, as presented, contains only statutory text and insertion notes. There are no judicial authorities cited in the instrument, and no footnotes or annotations referring to cases. The absence of case law references means that, within the supplied material, there is no recorded litigation history concerning this regulation.

• No administrative review records: The instrument does not include references to administrative reviews, tribunal determinations, or decisions in which the regulation has been considered. Any such authorities would have to be located outside the text provided.

• Practical inference for practitioners: Given the absence of litigation material in the regulation, practitioners who need to understand the regulation’s legal status or interpretation must look to case law databases, decisions interpreting the parent Act, or administrative determinations concerning the public guardian or NDIS providers. The supplied regulation does not provide that material.

• Where to search next: The text links to particular provisions of the Act (s 39, s 49A, s 72A) and cross‑references the Hospital and Health Boards Act 2011. If litigation exists on the application of these regulatory obligations, it would likely be referenced or contextualised in decisions interpreting those Act sections or in administrative reviews of the public guardian’s exercise of powers. Those materials are not present in this regulation text and must be sought outside it.

In short, there is no litigation history contained in the supplied regulation. The absence of recorded cases or decisions in the instrument itself is a statement about the document, not about whether litigation exists elsewhere. Practitioners should not assume there is none; they should search relevant case law and tribunal decisions if precedent is required.

The regulation is compact, but several implementation traps and interpretive issues arise from the text as supplied. These are not value judgments; they are points where practical compliance, legal scope or procedural uncertainty can produce friction.

1. The schedule 1 dependency is material and opaque. Section 3 prescribes "the places stated in schedule 1" as visitable sites (s 3(1)), but schedule 1 is not included in the text you provided. Whether a given provider must report addresses because their sites are "visitable" depends on schedule 1’s content. Practitioners should not assume which facilities are included without consulting schedule 1.

2. The regulation ties the reporting duties to the conditions in the Act. Both s 4 and s 5 are framed "for section 49A (2) of the Act" and "for section 72A (2) of the Act" respectively (s 4(1); s 5(1)). That means whether a provider is obliged to report depends on whether the provider’s activities fall within the scope of those Act sections. The regulation does not restate the Act’s thresholds or triggers. Check the Act to confirm whether a particular service or site falls within s 49A or s 72A.

3. Different coverage for adult and child duties. Section 4 applies only to "registered NDIS providers" for the adult program, while s 5 applies to "NDIS providers or registered NDIS providers" for child accommodation services. The practical effect is that unregistered NDIS providers may be out of scope for adult reporting but within scope for child accommodation reporting. This split can create compliance complexity for mixed providers.

4. Timing and short reporting window. The regulation demands an initial report "on or before 14 October 2019" and quarterly reports "within 14 days after the end of each quarter" thereafter (s 4(1); s 5(1)). The 14‑day post‑quarter window is short relative to many corporate reporting cycles. Providers need internal processes to capture site additions or contact changes and to deliver them promptly. The quarter definition is set in s 2A (1 January-31 March; 1 April-30 June; 1 July-30 September; 1 October-31 December), so for example a change on 1 July must be reported within 14 days of 30 September.

5. No method of delivery specified. The regulation says providers "must give the public guardian the required information" but does not specify format, channel, or address for delivery (s 4(1); s 5(1)). That omission creates operational uncertainty: does the public guardian accept email, online form, hard copy, or portal upload? Providers must confirm the delivery method with the public guardian’s office because the regulation itself is silent.

6. No express requirement to update historical entries or to indicate deletions. The regulation requires the address of each visitable site or place where the service is provided (s 4(2); s 5(2)). It does not state whether providers must indicate that a site has closed, or how to report corrections. The 14‑day quarterly update cadence implicitly covers changes, but practitioners should note there is no explicit procedure for de‑listing or correcting addresses in the regulation text.

7. Limited data fields. The regulation limits "required information" to name, contact telephone number, email and site addresses. If the public guardian requires additional metadata (for example, capacity, type of service, service hours) those requirements are not in this regulation. Any additional data collection must be authorised by the Act or by another instrument.

8. No sanctions in this instrument. The regulation contains no penalty provisions. That means that the legal remedy for non‑compliance must be found in the Act or in other legislation. Practitioners should not treat the regulation as a stand‑alone enforcement instrument.

9. Cross‑statutory definitions are external. Terms such as "NDIS provider" and "registered NDIS provider" are not defined in the regulation. These definitions are important. Do not assume a term’s meaning without checking the Act or the NDIS statutory framework.

10. Commencement notes could mislead about effective dates. While the regulation broadly commenced on 1 July 2014 (s 2), the reporting duties and the quarter definition are annotated as inserted in 2019. The requirement to report "on or before 14 October 2019" is explicit (s 4(1); s 5(1)), but practitioners should confirm the operative commencement date for the inserts in the published instrument to verify any transitional obligations.

These "gotchas" are the regulation’s practical points of friction. Each arises directly from text in the instrument: schedule dependency (s 3), Act linkage (s 4(1); s 5(1)), differing provider scope (s 4(1); s 5(1)), timing and quarter definition (s 2A; s 4(1); s 5(1)), and the omission of delivery, penalty and procedural details.

The regulation’s compliance requirements are specific and limited. Compliance therefore consists of a narrow set of verifiable actions: identify whether you are within scope, collect the prescribed data fields, and deliver them to the public guardian by the specified deadlines. The following steps are concrete and grounded on the regulatory text.

1. Confirm scope under the Act

• Ascertain whether your organisation is a "registered NDIS provider" or an "NDIS provider" as those terms are used in the Act and relevant NDIS legislation. The regulation does not define those terms (s 4; s 5), so the provider must rely on the NDIS legal framework for definitions.

• Determine whether the services you provide fall within the Act’s s 49A (adult community visitor program) or s 72A (child community visitor program). The regulation’s duties apply only "in relation to which section 49A of the Act applies" or "in relation to which section 72A of the Act applies" (s 4(2); s 5(2)). Confirm with legal counsel or the public guardian whether particular services/sites trigger those Act provisions.

• Check schedule 1 to confirm whether your sites are listed as visitable sites for s 39 of the Act. The regulation prescribes schedule 1 as the list (s 3(1)); compliance depends on whether your facility is in that schedule.

2. Assemble required information fields

• For each applicable provider identity, compile and verify:

  • Provider name (s 4(2)(a)(i); s 5(2)(a)(i)).
  • Contact telephone number (s 4(2)(a)(ii); s 5(2)(a)(ii)).
  • Email address (s 4(2)(a)(iii); s 5(2)(a)(iii)).
  • The physical address of each visitable site or each place at which the child accommodation service is provided and to which the relevant Act section applies (s 4(2)(b); s 5(2)(b)).

• Maintain an auditable register that records the date each data element was last verified. Because reporting is quarterly, the register will provide the basis for each scheduled submission.

3. Establish a reporting calendar and process

• Use the regulation’s quarter definition (s 2A) to construct your reporting calendar: quarters are standard calendar quarters (1 Jan-31 Mar; 1 Apr-30 Jun; 1 Jul-30 Sep; 1 Oct-31 Dec). The regulation was amended to insert that definition in 2019 (s 2A ins 2019 SL No. 114 s 4).

• Schedule reports to be produced within 14 days after the end of each quarter (s 4(1); s 5(1)). For example, for the quarter 1 April-30 June, the report must be delivered on or before 14 July.

• Note the initial deadline in the regulation: "on or before 14 October 2019" (s 4(1); s 5(1)). That was the first reporting date after the 2019 insertions.

4. Determine delivery channel and confirm with the public guardian

• The regulation requires providers to "give the public guardian the required information" but does not specify the means (s 4(1); s 5(1)). Contact the public guardian’s office to confirm the accepted formats (email, online portal, secure portal, hard copy). Retain acknowledgements of receipt.

• Where digital delivery is used, preserve the original submission files and any automatic receipts. Where email is used, save sent items and delivery receipts.

5. Governance, record keeping and update procedures

• Implement an internal procedure that triggers a commitment to report when new sites are opened, closed, or reclassified, or when contact details change. Because the regulation requires quarterly updates, maintaining a live register reduces the risk of late reporting.

• Keep records of every submission, including the list of addresses provided and the date of submission, in case the public guardian or other regulator requests evidence of compliance.

6. Address clarity and exceptions

• If any site’s status as a "visitable site" or the applicability of s 49A or s 72A is uncertain, escalate the query to legal counsel and to the public guardian for confirmation before the reporting deadline.

• If multiple legal entities provide services at the same physical address, decide who will report that site. The regulation requires the address "of each visitable site at which the registered NDIS provider provides services" (s 4(2)(b)), so multiple providers may need to separately report the same address if each provides services there.

7. Audit and compliance review

• Conduct periodic internal audits of the reporting process, at least annually, to confirm that the register of providers and addresses aligns with operational reality and that reporting has been timely and complete.

• Ensure that the governance trail records who prepared the report, who reviewed it, and who submitted it to the public guardian.

8. Liaise with the public guardian about procedural gaps

• Because the regulation does not provide enforcement or delivery detail, confirm with the public guardian whether they require specific templates, whether they will publish or use the data in a particular way, and whom to contact for technical or content queries.

9. Prepare for change

• Keep track of any further amendments to the regulation, schedule 1, or the Act that could alter reporting fields, deadlines or scope. The regulation’s history shows it has been updated by subordinate legislation (2019 insertions), so further change is possible.

These steps are directly grounded in the regulation text: identify scope under the relevant Act sections (s 4; s 5), collect the prescribed fields (s 4(2); s 5(2)), use the quarter definition (s 2A), and meet the timing requirements (s 4(1); s 5(1)). Because the regulation omits details on delivery method and enforcement, confirming implementation details with the public guardian is an essential compliance step.